Re: i014 - Metadata Update/Reconciliation: a proposal

But then what the point of the comparison assertion then?  If anything 
could influence it, even the time of day, then WSA's claim about their 
equality is really meaningless - isn't it?  It seems that the metadata 
itself must be retrieved for the two EPR (and in their proper context) and 
then that metadata itself compared.  Perhaps the current (or suggested) 
text would make more sense if I understood the use-case it was addressing 
(no pun intended :-)  - does anyone have that?   And, if, as you suggest, 
its the application's job to take them all into account then the spec 
should probably say that since as written it implies that a simple EPR 
comparison is enough to draw some very broad conclusions.

Rich Salz <> 
Sent by:
12/15/2004 09:04 AM

Doug Davis/Raleigh/IBM@IBMUS
Hugo Haas <>, "" 
Re: i014 - Metadata Update/Reconciliation: a proposal

> It seems to me that there are lots of factors that may
> influence the metadata associated with an EPR and WSA can't possibly 
> them all into account.

WSA doesn't take them all into account; it requires the application(s)
involved to take them all into account.  That may be an undue burden.
Or not:  does "we're the same server" mean "we'll always answer the same
to everyone"?  Of course not.

Rich Salz                  Chief Security Architect
DataPower Technology
XS40 XML Security Gateway
XML Security Overview

Received on Wednesday, 15 December 2004 14:23:31 UTC